SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:2402-1)

This update for flash-player fixes the following issues : - CVE-2015-8644: Type confusion vulnerability that could lead to code execution. - CVE-2015-8651: Integer overflow vulnerability that could lead to code execution. - CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640...

SUSE SLED11 / SLES11 Security Update : grub2 (SUSE-SU-2015:2385-1)

This update for grub2 provides the following fixes : A security issues with a bufferoverflow when reading username and password was fixed bsc956631, CVE-2015-8370 Also following bugs were fixed : - Fix buffer overflows when reading username and password. bsc956631, CVE-2015-8370 - Expand list of...

SUSE SLED11 / SLES11 Security Update : xfsprogs (SUSE-SU-2015:2383-1)

xfsprogs was updated to fix one security vulnerability and several bugs. - Handle unwanted data disclosure in xfsmetadump bsc939367, CVE-2012-2150 - Fix segfault during xfsrepair run bsc911866 - Fix definition of leaf attribute block to avoid gcc optimization xfsprogs-fix-leaf-block-definition No...

SUSE SLED11 / SLES11 Security Update : grub2 (SUSE-SU-2015:2386-1)

This update for grub2 provides the following fixes : A security issues with a bufferoverflow when reading username and password was fixed bsc956631, CVE-2015-8370 Bugs fixed : - Expand list of grub.cfg search path in PV Xen guests for systems installed on btrfs snapshots. bsc946148, bsc952539 - A...

SUSE SLED11 / SLES11 Security Update : MozillaFirefox (SUSE-SU-2015:2334-1)

Mozilla Firefox was updated to version 38.5.0 esr to fix the following issues : Following security issues were fixed : - MFSA 2015-134/CVE-2015-7201/CVE-2015-7202 Miscellaneous memory safety hazards rv:43.0 / rv:38.5 - MFSA 2015-138/CVE-2015-7210 Use-after-free in WebRTC when datachannel is used...

SUSE SLED11 / SLES11 Security Update : xen (SUSE-SU-2015:2338-1)

This update fixes the following security issues : - bsc955399 - Fix xm migrate --logprogress. Due to logic error progress was not logged when requested. - bsc956832 - CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list - bsc956592 - xen: virtual PMU is...

SUSE SLED11 / SLES11 Security Update : bind (SUSE-SU-2015:2340-1)

This update fixes the following security issue : - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses bsc958861. It also fixes a bug : - Fix a regression in caching entries with a TTL of 0 bsc923281. Note that Tenable Network Security has extracted the preceding...

SUSE SLED11 / SLES11 Security Update : xen (SUSE-SU-2015:2326-1)

This update fixes the following security issues : - bsc956832 - CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list - bsc956592 - xen: virtual PMU is unsupported XSA-163 - bsc956408 - CVE-2015-8339, CVE-2015-8340: xen: XENMEMexchange error handling issues XSA-1...

SUSE SLED11 / SLES11 Security Update : mysql (SUSE-SU-2015:2303-1)

The mysql package was updated to version 5.5.46 to fixs several security and non security issues. - bnc951391: update to version 5.5.46 - changes: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5- 46.html - fixed CVEs: CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,...

SUSE SLED11 / SLES11 Security Update : krb5 (SUSE-SU-2015:2294-1)

The krb5 package was updated to fix the following security and non security issues : - CVE-2015-2695: Fixed missing functions that were still vulnerable bsc954270. - Fixed a memory leak in the handling of error messages bsc954470. Note that Tenable Network Security has extracted the preceding...

SUSE SLED11 / SLES11 Security Update : openssl (SUSE-SU-2015:2275-1)

This update for openssl fixes the following issues : - CVE-2015-3195: When presented with a malformed X509ATTRIBUTE structure OpenSSL would leak memory. This structure is used by the PKCS7 and CMS routines so any application which reads PKCS7 or CMS data from untrusted sources is affected. SSL/TL...

SUSE SLED11 Security Update : compat-openssl097g (SUSE-SU-2015:2251-1)

This update for compat-openssl097g fixes the following issues : Security issue fixed : - CVE-2015-3195: When presented with a malformed X509ATTRIBUTE structure OpenSSL would leak memory. This structure is used by the PKCS7 and CMS routines so any application which reads PKCS7 or CMS data from...

SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:2236-1)

This update for flash-player to version 11.2.202.554 fixes the following security issues in Adobe security advisory APSB15-32. - These updates resolve heap buffer overflow vulnerabilities that could lead to code execution CVE-2015-8438, CVE-2015-8446. - These updates resolve memory corruption...

SUSE SLED11 / SLES11 Security Update : wpa_supplicant (SUSE-SU-2015:2221-1)

wpasupplicant was updated to fix two security issues. These security issues were fixed : - CVE-2015-4142: Integer underflow in the WMM Action frame parser in hostapd and wpasupplicant, when used for AP mode MLME/SME functionality, allowed remote attackers to cause a denial of service crash via a...

SUSE SLED11 / SLES11 Security Update : libmspack (SUSE-SU-2015:2215-1)

libmspack was updated to fix several security vulnerabilities. - Fix NULL pointer dereference on a crafted CAB. bsc934524, CVE-2014-9732 - Fix denial of service while processing crafted CHM file. bsc934525, CVE-2015-4467 - Fix denial of service while processing crafted CHM file. bsc934529,...

SUSE SLED11 / SLES11 Security Update : dhcpcd (SUSE-SU-2015:2174-1)

dhcpcd was updated to fix one security issue. This security issue was fixed : - A missing length check in decodesearch could have caused DOS bsc955762. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

SUSE SLED11 / SLES11 Security Update : orca (SUSE-SU-2015:2172-1)

This orca update fixes the following security issue. - Don't try to import modules from current working directory bsc916835, CVE-2013-4245. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED11 / SLES11 Security Update : gpg2 (SUSE-SU-2015:2170-1)

This update for gpg2 fixes the following issues : - Fix cve-2015-1606 bsc918089 - Invalid memory read using a garbled keyring - 0001-Gpg-prevent-an-invalid-memory-read-using-a-garbled- k.patch - Fix cve-2015-1607 bsc918090 - Memcpy with overlapping ranges -...

SUSE SLED11 / SLES11 Security Update : strongswan (SUSE-SU-2015:2186-1)

The strongswan package was updated to fix the following security issue : - CVE-2015-8023: Fixed an authentication bypass vulnerability in the eap-mschapv2 plugin bsc953817. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED11 Security Update : cabextract (SUSE-SU-2015:2131-1)

This security update fixes the following issues : - Fix possible infinite loop caused DoS bsc919283, CVE-2014-9556 - Fix zero dereference bsc934524, CVE-2014-9732 - Fix off by one bsc934527, CVE-2015-4470 - Fix buffer under-read crash bsc934528, CVE-2015-4471 Note that Tenable Network Security ha...